Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Windows Defender SmartScreen #419

Open
Tracked by #420
simonhamp opened this issue Apr 24, 2024 · 4 comments
Open
Tracked by #420

Windows Defender SmartScreen #419

simonhamp opened this issue Apr 24, 2024 · 4 comments
Labels
help wanted Extra attention is needed kind/php-and-sapi Issues related to php source and SAPI os/windows Things only for Windows question Further information is requested

Comments

@simonhamp
Copy link
Contributor

The first hurdle when trying to run a compiled php.exe seems to be this

Screenshot 2024-04-24 at 13 04 11

Clicking the 'More info' link reveals this:

Screenshot 2024-04-24 at 13 04 33

Obviously, we can't expect every Windows user to disable SmartScreen. I'm guessing there's some sort of code signing that's needed to overcome this?

@crazywhalecc
Copy link
Owner

Unfortunately I know nothing about windows executable signing. A self-signed certificate may be able to sign, but may not avoid SmartScreen. In addition, using a third-party issuance of compiled php.exe may also be a violation of the agreement?

@crazywhalecc crazywhalecc added bug Something isn't working kind/php-and-sapi Issues related to php source and SAPI os/windows Things only for Windows labels Apr 25, 2024
@simonhamp
Copy link
Contributor Author

Which agreement?

@crazywhalecc
Copy link
Owner

crazywhalecc commented Apr 26, 2024

@simonhamp I just assumed that I used a self-signed certificate and uploaded php.exe on static-php.dev. I don't know if doing so would violate the PHP License, GPL or other specific agreements or licenses.

The problem depends on how to avoid SmartScreen. If SmartScreen can be avoided by signing (no matter who's signature), and doing so doesn't violate any agreements or licenses, that's OK.

But how to sign raises another issue. Even if I can sign, how should others sign when compiling locally using static-php? 😵‍💫

@simonhamp
Copy link
Contributor Author

Yeh I understand. I will do more digging

@crazywhalecc crazywhalecc added help wanted Extra attention is needed question Further information is requested and removed bug Something isn't working labels May 13, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
help wanted Extra attention is needed kind/php-and-sapi Issues related to php source and SAPI os/windows Things only for Windows question Further information is requested
Projects
None yet
Development

No branches or pull requests

2 participants